Please submit an issue or pull request for any non critical bugs or non critical vulnerabilities you find.
To do so, please use the gematik service desk https://service.gematik.de/servicedesk/customer/portal/26.
In case of a responsible disclosure, please follow instructions on https://www.gematik.de/datensicherheit#c1227.